@kya-brasil/agent-tools 0.7.0 → 0.9.0

package/README.md

@@ -141,6 +141,31 @@ npx -p @kya-brasil/agent-tools kya-sign --pfx empresa.pfx --text-file desafio.tx
 
 The password comes from `KYA_PFX_PASSWORD` or is asked for without echo. Everything runs locally.
 
+**A3 (token or smart card).** Through PKCS#11, the interface every ICP-Brasil token driver ships. Install the
+optional `pkcs11js` and point to the vendor's library (e.g. SafeNet eToken `libeTPkcs11.so` / `eTPKCS11.dll`):
+
+```sh
+npm install pkcs11js
+npx -p @kya-brasil/agent-tools kya-sign --pkcs11 /usr/lib/libeTPkcs11.so --list                       # certificates on the token
+npx -p @kya-brasil/agent-tools kya-sign --pkcs11 /usr/lib/libeTPkcs11.so --link "<sign_url>&agent_signature=…"
+```
+
+```ts
+const token = await openToken({ library: "/usr/lib/libeTPkcs11.so", pin: process.env.TOKEN_PIN! });
+try { ecnpj_signature = await token.sign(reg.challenge.text); } finally { token.close(); }
+```
+
+The PIN comes from `KYA_TOKEN_PIN` or is asked for. The key never leaves the token. Tested against SoftHSM2 (a
+software PKCS#11 token) in CI. The signing code is in `@kya-brasil/core` (`openPfx`, `ecnpjSigner`,
+`buildDetachedCms`), re-exported here; any other token or cloud signer plugs into `ecnpjSigner`.
+
+**Cloud certificate (PSC).** `kya-sign --cloud ./my-psc.mjs --link "<sign_url>"` with a module that implements
+`CloudSignatureProvider` for your PSC ([template](https://github.com/celfons/kya-brasil/tree/main/examples/cloud-provider));
+the browser opens for the approval and the terminal receives the redirect on `127.0.0.1`.
+
+**From the agent's side**, `kya.signLink(credentialId, { challenge_id, agent_signature })` (free) returns the
+`sign_url` to send, the same as `signingLink(...)` offline and the MCP tool `kya_sign_link`.
+
 An agent should not hold the company's e-CNPJ to sign for itself: that signature is the company's consent.
 Let the agent prepare and send the link, and a person sign.
 

package/dist/cli.js

@@ -1,14 +1,24 @@
 #!/usr/bin/env node
 /**
- * kya-sign: sign a KYA challenge (or a company request text) with the e-CNPJ in a .pfx / .p12 file.
- *   npx -p @kya-brasil/agent-tools kya-sign --pfx empresa.pfx --text-file desafio.txt
- *   npx -p @kya-brasil/agent-tools kya-sign --pfx empresa.pfx --link "https://…/sign?id=…&challenge_id=…&text=…&agent_signature=…"
- * The password comes from KYA_PFX_PASSWORD or is asked for (not echoed). Prints the base64 signature, or with
- * --link and an agent_signature in it, sends the proof and prints the issued credential.
- * Everything happens on this machine; the certificate is never sent anywhere.
+ * kya-sign: sign a KYA challenge (or a company request text) with the company's e-CNPJ, A1 or A3.
+ *   A1 file:   kya-sign --pfx empresa.pfx --link "<sign_url>&agent_signature=…"
+ *   A3 token:  kya-sign --pkcs11 /usr/lib/libeTPkcs11.so --link "<sign_url>&agent_signature=…"
+ *              kya-sign --pkcs11 <library> --list              (certificates on the token)
+ *   Cloud:     kya-sign --cloud ./my-psc.mjs --link "<sign_url>&agent_signature=…"
+ *              (a module exporting a CloudSignatureProvider: yours, for your PSC; the browser opens for the
+ *               approval and comes back to a one-time local address)
+ *   Text instead of a link: --text-file desafio.txt or --text "<text>" (prints the signature).
+ * The password (A1) comes from KYA_PFX_PASSWORD and the PIN (A3) from KYA_TOKEN_PIN, or are asked for without
+ * echo. With a link carrying agent_signature, the proof is sent and the issued credential printed. Everything
+ * happens on this machine; the certificate and its password or PIN are never sent anywhere.
  */
 import { readFileSync } from "node:fs";
-import { openPfx } from "./pfx.js";
+import { createServer } from "node:http";
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { spawn } from "node:child_process";
+import { cloudSigner, newState, pkcePair, openPfx, readSigningLink } from "@kya-brasil/core";
+import { listTokenCertificates, openToken } from "./pkcs11.js";
 const args = process.argv.slice(2);
 const opt = (name) => {
     const i = args.indexOf(`--${name}`);
@@ -18,15 +28,15 @@ const die = (msg) => {
     process.stderr.write(`kya-sign: ${msg}\n`);
     process.exit(1);
 };
-async function askPassword() {
-    if (process.env.KYA_PFX_PASSWORD !== undefined)
-        return process.env.KYA_PFX_PASSWORD;
+async function askSecret(envName, prompt) {
+    if (process.env[envName] !== undefined)
+        return process.env[envName];
     if (!process.stdin.isTTY)
-        die("set KYA_PFX_PASSWORD (no terminal to ask for the password)");
-    process.stderr.write("Senha do certificado / certificate password: ");
+        die(`set ${envName} (no terminal to ask for it)`);
+    process.stderr.write(prompt);
     process.stdin.setRawMode(true);
     process.stdin.resume();
-    let pw = "";
+    let secret = "";
     return new Promise((resolve) => {
         process.stdin.on("data", (b) => {
             for (const ch of b.toString("utf8")) {
@@ -34,45 +44,114 @@ async function askPassword() {
                     process.stdin.setRawMode(false);
                     process.stdin.pause();
                     process.stderr.write("\n");
-                    return resolve(pw);
+                    return resolve(secret);
                 }
                 if (ch === "\u0003")
                     process.exit(130);
-                pw = ch === "\u007f" ? pw.slice(0, -1) : pw + ch;
+                secret = ch === "\u007f" ? secret.slice(0, -1) : secret + ch;
             }
         });
     });
 }
-const fromB64u = (s) => new TextDecoder().decode(Uint8Array.from(atob(s.replace(/-/g, "+").replace(/_/g, "/")), (c) => c.charCodeAt(0)));
+/** Loads a provider module: a path (./my-psc.mjs) or a package name; default export or `provider`. */
+async function loadProvider(spec) {
+    const url = spec.startsWith(".") || spec.startsWith("/") ? pathToFileURL(resolve(spec)).href : spec;
+    const mod = (await import(url));
+    const p = (mod.provider ?? mod.default);
+    if (!p || typeof p.authorizationUrl !== "function" || typeof p.exchangeCode !== "function")
+        die(`${spec} does not export a CloudSignatureProvider (default export or "provider")`);
+    return p;
+}
+/**
+ * OAuth with PKCE through the browser: a one-time server on 127.0.0.1 receives the code, checks the state,
+ * exchanges it and returns an e-CNPJ signer over the provider's session.
+ */
+async function cloudLogin(provider, port, open) {
+    const state = newState();
+    const { verifier, challenge } = await pkcePair();
+    let answer;
+    const answered = new Promise((r) => (answer = r));
+    const server = createServer((req, res) => {
+        const u = new URL(req.url ?? "/", "http://127.0.0.1");
+        if (u.pathname !== "/callback")
+            return void res.writeHead(404).end();
+        const ok = u.searchParams.get("state") === state && !!u.searchParams.get("code");
+        res.writeHead(ok ? 200 : 400, { "content-type": "text/html; charset=utf-8" }).end(ok ? "<p>Autorizado. Pode fechar esta janela e voltar ao terminal.</p>" : "<p>Autorização recusada ou inválida.</p>");
+        answer(ok ? { code: u.searchParams.get("code") } : { error: u.searchParams.get("error_description") ?? u.searchParams.get("error") ?? "state mismatch" });
+    });
+    await new Promise((r) => server.listen(port, "127.0.0.1", r));
+    const addr = server.address();
+    const redirectUri = `http://127.0.0.1:${typeof addr === "object" && addr ? addr.port : port}/callback`;
+    const timer = setTimeout(() => answer({ error: "no approval within 5 minutes" }), 300_000);
+    try {
+        const url = await provider.authorizationUrl({ redirectUri, state, codeChallenge: challenge });
+        process.stderr.write(`Abra para aprovar no ${provider.name} / open to approve:\n  ${url}\n`);
+        if (open) {
+            const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+            const a = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+            spawn(cmd, a, { stdio: "ignore", detached: true }).on("error", () => undefined).unref();
+        }
+        const r = await answered;
+        if (!r.code)
+            throw new Error(`not authorized: ${r.error}`);
+        const session = await provider.exchangeCode({ code: r.code, redirectUri, codeVerifier: verifier });
+        const signer = await cloudSigner(session);
+        return { ...signer, close: async () => void (await session.close?.().catch(() => undefined)) };
+    }
+    finally {
+        clearTimeout(timer);
+        server.close();
+    }
+}
+const USAGE = `usage:
+  kya-sign --pfx <file.pfx> (--link <signing link> | --text-file <file> | --text <text>)
+  kya-sign --pkcs11 <library> [--slot N] [--label L] (--link … | --text-file … | --text …)
+  kya-sign --pkcs11 <library> --list
+  kya-sign --cloud <provider module> [--port N] [--no-open] (--link … | --text-file … | --text …)
+`;
 async function main() {
-    if (args.includes("--help") || args.includes("-h") || !opt("pfx")) {
-        process.stdout.write("usage: kya-sign --pfx <file.pfx> (--text-file <file> | --text <text> | --link <signing link>)\n");
-        process.exit(args.includes("--help") || args.includes("-h") ? 0 : 2);
+    if (args.includes("--help") || args.includes("-h"))
+        return void process.stdout.write(USAGE);
+    const pfxPath = opt("pfx");
+    const library = opt("pkcs11");
+    const cloud = opt("cloud");
+    if (!pfxPath && !library && !cloud) {
+        process.stdout.write(USAGE);
+        process.exit(2);
     }
-    const link = opt("link") ? new URL(opt("link")) : null;
-    const text = link ? fromB64u(link.searchParams.get("text") ?? die("the link has no text")) : opt("text-file") ? readFileSync(opt("text-file"), "utf8") : (opt("text") ?? die("give --text-file, --text or --link"));
-    const signer = openPfx(new Uint8Array(readFileSync(opt("pfx"))), await askPassword());
-    const cnpj = /^cnpj: (\d{14})$/m.exec(text)?.[1];
-    process.stderr.write(`certificate: ${signer.subject}\n`);
-    if (cnpj && signer.cnpj && cnpj !== signer.cnpj)
-        die(`this certificate is for CNPJ ${signer.cnpj}, the text is for ${cnpj}`);
-    process.stderr.write(`signing:\n${text.split("\n").map((l) => `  ${l}`).join("\n")}\n`);
-    const signature = signer.sign(text);
-    const id = link?.searchParams.get("id");
-    const challengeId = link?.searchParams.get("challenge_id");
-    const agentSignature = link?.searchParams.get("agent_signature");
-    if (!link || !id || !challengeId || !agentSignature) {
-        process.stdout.write(`${signature}\n`);
+    const slot = opt("slot") !== undefined ? Number(opt("slot")) : undefined;
+    if (library && args.includes("--list")) {
+        for (const c of await listTokenCertificates({ library, slot }))
+            process.stdout.write(`${c.label}\t${c.cnpj ?? "-"}\t${c.notAfter.toISOString().slice(0, 10)}\t${c.subject}\n`);
         return;
     }
-    const res = await fetch(new URL(`/v1/agents/${encodeURIComponent(id)}/prove`, link.origin), {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ challenge_id: challengeId, agent_signature: agentSignature, ecnpj_signature: signature })
-    });
-    const body = await res.text();
-    process.stdout.write(`${body}\n`);
-    if (!res.ok)
-        process.exit(1);
+    const link = opt("link") ? readSigningLink(opt("link")) : null;
+    const text = link ? link.text : opt("text-file") ? readFileSync(opt("text-file"), "utf8") : (opt("text") ?? die("give --link, --text-file or --text"));
+    let signer;
+    if (cloud)
+        signer = await cloudLogin(await loadProvider(cloud), opt("port") ? Number(opt("port")) : 0, !args.includes("--no-open"));
+    else if (library)
+        signer = await openToken({ library, slot, label: opt("label"), pin: await askSecret("KYA_TOKEN_PIN", "PIN do token / token PIN: ") });
+    else
+        signer = await openPfx(new Uint8Array(readFileSync(pfxPath)), await askSecret("KYA_PFX_PASSWORD", "Senha do certificado / certificate password: "));
+    try {
+        process.stderr.write(`certificate: ${signer.subject}\nsigning:\n${text.split("\n").map((l) => `  ${l}`).join("\n")}\n`);
+        const signature = await signer.sign(text);
+        if (!link?.credentialId || !link.challengeId || !link.agentSignature) {
+            process.stdout.write(`${signature}\n`);
+            return;
+        }
+        const res = await fetch(new URL(`/v1/agents/${encodeURIComponent(link.credentialId)}/prove`, link.issuer), {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ challenge_id: link.challengeId, agent_signature: link.agentSignature, ecnpj_signature: signature })
+        });
+        process.stdout.write(`${await res.text()}\n`);
+        if (!res.ok)
+            process.exitCode = 1;
+    }
+    finally {
+        await signer.close?.();
+    }
 }
 main().catch((e) => die(e.message));

package/dist/index.d.ts

@@ -141,6 +141,8 @@ export interface Registration {
         pt: string;
     };
     mandate_schema: string;
+    /** Link for the e-CNPJ holder; append &agent_signature=… (or use signingLink / signLink). */
+    sign_url?: string;
 }
 export interface Proof {
     challenge_id: string;
@@ -204,6 +206,16 @@ export interface KyaClient {
         warnings?: string[]; /** /v1 compatibility, same as warnings. */
         kyb_warnings: string[];
     }>;
+    /** Free: the link for the e-CNPJ holder (owner, accountant), with the agent's signature already in it. */
+    signLink(credentialId: string, q: {
+        challenge_id: string;
+        agent_signature?: string;
+    }): Promise<{
+        credential_id: string;
+        challenge_id: string;
+        expires_at: string;
+        sign_url: string;
+    }>;
     /** $0.10: renewal challenge (then renewProve). */
     renew(credentialId: string): Promise<{
         credential_id: string;
@@ -361,7 +373,8 @@ export declare function verifyCredentialOffline(credential: Credential, opts?: {
     now?: Date;
 }): Promise<OfflineCheck>;
 export * from "./auth.js";
-export * from "./pfx.js";
+export { buildDetachedCms, cnpjFromCommonName, ecnpjSigner, openPfx, readSigningLink, signWithECnpjPfx, type ECnpjSigner, type RawSigner } from "@kya-brasil/core";
+export { listTokenCertificates, openToken, type TokenCertificate, type TokenOptions } from "./pkcs11.js";
 /**
  * Link to the issuer's signing page (<issuer>/sign) for the person who holds the company's e-CNPJ, usually the
  * owner or the accountant. The agent registers, signs its half and sends this link; the person opens it, sees

package/dist/index.js

@@ -88,6 +88,7 @@ export function createKyaClient(opts = {}) {
         allowed: (id, a) => call("GET", `/v1/agents/${encodeURIComponent(id)}/allowed${q(a)}`, undefined, true, 0.01),
         register: (input) => call("POST", "/v1/agents", input, true, 0.25),
         prove: (id, proof) => call("POST", `/v1/agents/${encodeURIComponent(id)}/prove`, proof),
+        signLink: (id, a) => call("GET", `/v1/agents/${encodeURIComponent(id)}/sign-link${q(a)}`),
         renew: (id) => call("POST", `/v1/agents/${encodeURIComponent(id)}/renew`, {}, true, 0.1),
         renewProve: (id, proof) => call("POST", `/v1/agents/${encodeURIComponent(id)}/renew/prove`, proof),
         revoke: (id, input) => call("POST", `/v1/agents/${encodeURIComponent(id)}/revoke`, input),
@@ -250,7 +251,10 @@ export async function verifyCredentialOffline(credential, opts = {}) {
     return { signature, within_validity, live_status: "unknown", usable_offline: signature.valid && within_validity && credential.status === "active" };
 }
 export * from "./auth.js";
-export * from "./pfx.js";
+// e-CNPJ signing (D-26, D-27): the implementation lives in @kya-brasil/core, shared with anyone using the library.
+export { buildDetachedCms, cnpjFromCommonName, ecnpjSigner, openPfx, readSigningLink, signWithECnpjPfx } from "@kya-brasil/core";
+export { listTokenCertificates, openToken } from "./pkcs11.js";
+import { signingLink as coreSigningLink } from "@kya-brasil/core";
 /**
  * Link to the issuer's signing page (<issuer>/sign) for the person who holds the company's e-CNPJ, usually the
  * owner or the accountant. The agent registers, signs its half and sends this link; the person opens it, sees
@@ -258,11 +262,5 @@ export * from "./pfx.js";
  * leaves the computer) or uploads a .p7s from any ICP-Brasil signer, and the credential is issued.
  */
 export function signingLink(p) {
-    const u = new URL("/sign", p.baseUrl ?? DEFAULT_BASE_URL);
-    u.searchParams.set("id", p.credentialId);
-    u.searchParams.set("challenge_id", p.challenge.id);
-    u.searchParams.set("text", toBase64Url(new TextEncoder().encode(p.challenge.text)));
-    if (p.agentSignature)
-        u.searchParams.set("agent_signature", p.agentSignature);
-    return u.toString();
+    return coreSigningLink({ issuer: p.baseUrl ?? DEFAULT_BASE_URL, credentialId: p.credentialId, challenge: p.challenge, agentSignature: p.agentSignature });
 }

package/dist/pkcs11.d.ts

@@ -0,0 +1,36 @@
+/**
+ * A3 e-CNPJ (token or smart card) through PKCS#11, the interface every ICP-Brasil token driver ships
+ * (e.g. SafeNet eToken: libeTPkcs11.so / eTPKCS11.dll; GD/Watchdata/Oberthur: their own libraries). The
+ * private key never leaves the device: only the bytes to sign go in and the signature comes out. Node only;
+ * needs the optional package pkcs11js (npm install pkcs11js) and the vendor's library path.
+ */
+import { type ECnpjSigner } from "@kya-brasil/core";
+export interface TokenOptions {
+    /** Path to the vendor's PKCS#11 library (.so / .dylib / .dll). */
+    library: string;
+    /** The token's user PIN. */
+    pin: string;
+    /** Index among the slots with a token present (default 0). */
+    slot?: number;
+    /** Pick the certificate by its label on the token; default: the one whose common name carries a CNPJ. */
+    label?: string;
+}
+export interface TokenCertificate {
+    label: string;
+    subject: string;
+    cnpj: string | null;
+    notAfter: Date;
+}
+/** Certificates on the token (no PIN needed on most tokens), to pick one with `label`. */
+export declare function listTokenCertificates(o: {
+    library: string;
+    slot?: number;
+    pin?: string;
+}): Promise<TokenCertificate[]>;
+/**
+ * Opens the token and returns an e-CNPJ signer (same interface as openPfx). Call close() when done; it logs out
+ * and releases the token.
+ */
+export declare function openToken(o: TokenOptions): Promise<ECnpjSigner & {
+    close(): void;
+}>;

package/dist/pkcs11.js

@@ -0,0 +1,124 @@
+/**
+ * A3 e-CNPJ (token or smart card) through PKCS#11, the interface every ICP-Brasil token driver ships
+ * (e.g. SafeNet eToken: libeTPkcs11.so / eTPKCS11.dll; GD/Watchdata/Oberthur: their own libraries). The
+ * private key never leaves the device: only the bytes to sign go in and the signature comes out. Node only;
+ * needs the optional package pkcs11js (npm install pkcs11js) and the vendor's library path.
+ */
+import { ecnpjSigner } from "@kya-brasil/core";
+// DigestInfo prefix for SHA-256 (RFC 8017), for tokens that only offer raw CKM_RSA_PKCS.
+const SHA256_DIGEST_INFO = Uint8Array.from([0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01, 0x05, 0x00, 0x04, 0x20]);
+async function load() {
+    try {
+        const mod = (await import("pkcs11js"));
+        return mod.default ?? mod;
+    }
+    catch {
+        throw new Error("A3 tokens need the optional package pkcs11js: npm install pkcs11js");
+    }
+}
+async function openSession(o) {
+    const p11 = await load();
+    const lib = new p11.PKCS11();
+    lib.load(o.library);
+    lib.C_Initialize();
+    const finalize = () => {
+        try {
+            lib.C_Finalize();
+        }
+        catch {
+            /* already finalized */
+        }
+    };
+    try {
+        const slots = lib.C_GetSlotList(true);
+        const slot = slots[o.slot ?? 0];
+        if (!slot)
+            throw new Error(slots.length ? `no token in slot ${o.slot}` : "no token found: is it plugged in, and is this the right library?");
+        const session = lib.C_OpenSession(slot, p11.CKF_SERIAL_SESSION);
+        if (o.pin !== undefined)
+            lib.C_Login(session, p11.CKU_USER, o.pin);
+        lib.C_FindObjectsInit(session, [{ type: p11.CKA_CLASS, value: p11.CKO_CERTIFICATE }]);
+        const handles = lib.C_FindObjects(session, 64);
+        lib.C_FindObjectsFinal(session);
+        const certs = handles.map((handle) => {
+            const [value, id, label] = lib.C_GetAttributeValue(session, handle, [{ type: p11.CKA_VALUE }, { type: p11.CKA_ID }, { type: p11.CKA_LABEL }]);
+            const der = new Uint8Array(value.value);
+            let signer = null;
+            try {
+                signer = ecnpjSigner({ certificates: [der], sign: async () => new Uint8Array() });
+            }
+            catch {
+                /* not an X.509 certificate we can read */
+            }
+            return { handle, der, id: id.value ?? Buffer.alloc(0), label: label.value?.toString("utf8") ?? "", signer };
+        });
+        return {
+            p11,
+            lib,
+            session,
+            certs,
+            close() {
+                try {
+                    if (o.pin !== undefined)
+                        lib.C_Logout(session);
+                    lib.C_CloseSession(session);
+                }
+                catch {
+                    /* ignore */
+                }
+                finalize();
+            }
+        };
+    }
+    catch (e) {
+        finalize();
+        throw e;
+    }
+}
+/** Certificates on the token (no PIN needed on most tokens), to pick one with `label`. */
+export async function listTokenCertificates(o) {
+    const s = await openSession(o);
+    try {
+        return s.certs.filter((c) => c.signer).map((c) => ({ label: c.label, subject: c.signer.subject, cnpj: c.signer.cnpj, notAfter: c.signer.notAfter }));
+    }
+    finally {
+        s.close();
+    }
+}
+/**
+ * Opens the token and returns an e-CNPJ signer (same interface as openPfx). Call close() when done; it logs out
+ * and releases the token.
+ */
+export async function openToken(o) {
+    const s = await openSession(o);
+    try {
+        const { p11, lib, session } = s;
+        const cert = o.label ? s.certs.find((c) => c.label === o.label) : s.certs.find((c) => c.signer?.cnpj);
+        if (!cert?.signer)
+            throw new Error(o.label ? `no certificate labelled "${o.label}" on the token` : "no e-CNPJ certificate on the token (none with a CNPJ in its name); pass a label");
+        lib.C_FindObjectsInit(session, [{ type: p11.CKA_CLASS, value: p11.CKO_PRIVATE_KEY }, { type: p11.CKA_ID, value: cert.id }]);
+        const [key] = lib.C_FindObjects(session, 1);
+        lib.C_FindObjectsFinal(session);
+        if (!key)
+            throw new Error("the token has no private key for that certificate (wrong PIN or key not on this token)");
+        // The chain: the other certificates on the token, when any (the issuer also has the ICP-Brasil bundle).
+        const chain = s.certs.filter((c) => c !== cert && c.signer).map((c) => c.der);
+        const signRaw = async (data) => {
+            try {
+                lib.C_SignInit(session, { mechanism: p11.CKM_SHA256_RSA_PKCS }, key);
+                return new Uint8Array(lib.C_Sign(session, Buffer.from(data), Buffer.alloc(1024)));
+            }
+            catch {
+                // Older tokens: hash here and sign the DigestInfo with raw PKCS#1 v1.5.
+                const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", data));
+                lib.C_SignInit(session, { mechanism: p11.CKM_RSA_PKCS }, key);
+                return new Uint8Array(lib.C_Sign(session, Buffer.concat([SHA256_DIGEST_INFO, digest]), Buffer.alloc(1024)));
+            }
+        };
+        return { ...ecnpjSigner({ certificates: [cert.der, ...chain], sign: signRaw }), close: () => s.close() };
+    }
+    catch (e) {
+        s.close();
+        throw e;
+    }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kya-brasil/agent-tools",
-  "version": "0.7.0",
-  "description": "KYA Brasil for AI agents: verify that an agent acts for a Brazilian company (e-CNPJ-signed credential, revocation and company registration checked daily against the Receita's open data, no third-party service), check an action against its mandate, or give your own agent a credential (sign with the company's e-CNPJ .pfx, in code or with the kya-sign command). Sign in with KYA middleware (Hono, Express, Workers) and request signing. x402 payments (USDC on Base) handled for you. Adapters for Vercel AI SDK, LangChain, OpenAI and Anthropic.",
+  "version": "0.9.0",
+  "description": "KYA Brasil for AI agents: verify that an agent acts for a Brazilian company (e-CNPJ-signed credential, revocation and company registration checked daily against the Receita's open data, no third-party service), check an action against its mandate, or give your own agent a credential (sign with the company's e-CNPJ: A1 .pfx or A3 token via PKCS#11, in code or with the kya-sign command). Sign in with KYA middleware (Hono, Express, Workers) and request signing. x402 payments (USDC on Base) handled for you. Adapters for Vercel AI SDK, LangChain, OpenAI and Anthropic.",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -54,22 +54,24 @@
     "@x402/core": "^2.28.0",
     "@x402/evm": "^2.28.0",
     "@x402/fetch": "^2.28.0",
-    "node-forge": "1.4.0",
     "pkijs": "^3.4.1",
-    "viem": "^2.57.5"
+    "viem": "^2.57.5",
+    "@kya-brasil/core": "^0.9.0"
   },
   "devDependencies": {
-    "@kya-brasil/core": "workspace:*",
     "@peculiar/asn1-schema": "^2.3.15",
     "@peculiar/asn1-x509": "^2.3.15",
     "@peculiar/x509": "^2.1.0",
     "@types/node": "^22.20.5",
-    "@types/node-forge": "^1.3.14",
     "reflect-metadata": "^0.2.2",
     "typescript": "^5.9.3",
-    "vitest": "^4.1.11"
+    "vitest": "^4.1.11",
+    "pkcs11js": "2.1.7"
   },
   "bin": {
     "kya-sign": "./dist/cli.js"
+  },
+  "optionalDependencies": {
+    "pkcs11js": "2.1.7"
   }
 }

package/dist/pfx.d.ts

@@ -1,13 +0,0 @@
-export interface PfxSigner {
-    /** Subject of the e-CNPJ certificate, e.g. "CN=ACME LTDA:11222333000181, ...". */
-    subject: string;
-    /** CNPJ read from the certificate's common name ("NAME:CNPJ"), when present. */
-    cnpj: string | null;
-    notAfter: Date;
-    /** Detached CMS/PKCS#7 SignedData (base64 DER) over `text`, with the certificate chain found in the file. */
-    sign(text: string): string;
-}
-/** Opens a PKCS#12 file (bytes) with its password; throws a readable error on a wrong password or an empty file. */
-export declare function openPfx(pfx: Uint8Array, password: string): PfxSigner;
-/** One call: sign `text` with the e-CNPJ in a .pfx/.p12 file. Returns the base64 DER the issuer expects as ecnpj_signature. */
-export declare function signWithECnpjPfx(pfx: Uint8Array, password: string, text: string): string;

package/dist/pfx.js

@@ -1,66 +0,0 @@
-/**
- * e-CNPJ signing straight from the .pfx / .p12 file companies actually have (A1 certificates). node-forge reads
- * the legacy PKCS#12 encryptions (3DES, RC2) that Web Crypto cannot, which many Brazilian A1 files still use.
- * The page at <issuer>/sign runs the same steps in the browser; keep the two in sync.
- */
-import forge from "node-forge";
-const OID = {
-    shroudedKeyBag: forge.pki.oids.pkcs8ShroudedKeyBag,
-    keyBag: forge.pki.oids.keyBag,
-    certBag: forge.pki.oids.certBag,
-    sha256: forge.pki.oids.sha256,
-    contentType: forge.pki.oids.contentType,
-    data: forge.pki.oids.data,
-    messageDigest: forge.pki.oids.messageDigest,
-    signingTime: forge.pki.oids.signingTime
-};
-const cnOf = (c) => String(c.subject.getField("CN")?.value ?? "");
-const cnpjOfCn = (cn) => /:(\d{14})\s*$/.exec(cn)?.[1] ?? null;
-/** Opens a PKCS#12 file (bytes) with its password; throws a readable error on a wrong password or an empty file. */
-export function openPfx(pfx, password) {
-    let p12;
-    try {
-        p12 = forge.pkcs12.pkcs12FromAsn1(forge.asn1.fromDer(forge.util.binary.raw.encode(pfx)), false, password);
-    }
-    catch (e) {
-        throw new Error(`could not open the certificate file (wrong password or not a .pfx/.p12): ${e.message}`);
-    }
-    const keyBag = [OID.shroudedKeyBag, OID.keyBag].flatMap((t) => p12.getBags({ bagType: t })[t] ?? []).find((b) => b.key);
-    if (!keyBag?.key)
-        throw new Error("the file has no private key");
-    const key = keyBag.key;
-    const certs = (p12.getBags({ bagType: OID.certBag })[OID.certBag] ?? []).map((b) => b.cert).filter((c) => !!c);
-    // The signer is the certificate whose public key matches the private key; the others are its chain.
-    const leaf = certs.find((c) => c.publicKey.n?.equals(key.n));
-    if (!leaf)
-        throw new Error("no certificate in the file matches its private key");
-    return {
-        subject: leaf.subject.attributes.map((a) => `${a.shortName ?? a.name}=${a.value}`).join(", "),
-        cnpj: cnpjOfCn(cnOf(leaf)),
-        notAfter: leaf.validity.notAfter,
-        sign(text) {
-            const p7 = forge.pkcs7.createSignedData();
-            p7.content = forge.util.createBuffer(forge.util.encodeUtf8(text));
-            p7.addCertificate(leaf);
-            for (const c of certs)
-                if (c !== leaf)
-                    p7.addCertificate(c);
-            p7.addSigner({
-                key,
-                certificate: leaf,
-                digestAlgorithm: OID.sha256,
-                authenticatedAttributes: [
-                    { type: OID.contentType, value: OID.data },
-                    { type: OID.messageDigest },
-                    { type: OID.signingTime, value: new Date() }
-                ]
-            });
-            p7.sign({ detached: true });
-            return forge.util.encode64(forge.asn1.toDer(p7.toAsn1()).getBytes());
-        }
-    };
-}
-/** One call: sign `text` with the e-CNPJ in a .pfx/.p12 file. Returns the base64 DER the issuer expects as ecnpj_signature. */
-export function signWithECnpjPfx(pfx, password, text) {
-    return openPfx(pfx, password).sign(text);
-}